This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/OiEBp0GKa1Rrx271L_Ta-KgAi9g.roa File: OiEBp0GKa1Rrx271L_Ta-KgAi9g.roa (raw, json) Hash identifier: lJRBkYeL9Nu/5ib2lExKbBVlayfZpUDinxzFBIQeINk= Subject key identifier: 3A:21:01:A7:41:8A:6B:54:6B:C7:6E:F5:2F:F4:DA:F8:A8:00:8B:D8 Certificate issuer: /CN=048eefb5b26483561711c990f20ff552ac4e2c9c Certificate serial: 019B7AC7D288FFC9BE9EBFE95CB22B2B6DA8 Authority key identifier: 04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/OiEBp0GKa1Rrx271L_Ta-KgAi9g.roa Signing time: Thu 01 Jan 2026 18:17:54 +0000 ROA not before: Thu 01 Jan 2026 18:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15491 IP address blocks: 146.255.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:d2:88:ff:c9:be:9e:bf:e9:5c:b2:2b:2b:6d:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048eefb5b26483561711c990f20ff552ac4e2c9c Validity Not Before: Jan 1 18:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a2101a7418a6b546bc76ef52ff4daf8a8008bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b0:c2:c3:cb:f0:c0:a8:a2:55:15:b1:a2:4b: c4:8d:a8:27:1b:1a:f3:a9:89:9e:52:5d:9c:42:bf: 69:b6:5e:91:70:ec:7a:e3:e7:42:fd:94:72:84:00: 1b:80:a8:e2:d0:64:fb:8e:8e:71:9f:ee:b6:2b:7b: 04:fa:45:d3:e7:d6:5c:b5:48:7b:38:86:9f:22:5e: f3:f8:56:fb:ac:c4:e4:d3:1e:bd:64:08:a9:4f:75: 56:0a:07:76:0d:82:34:92:67:23:c0:48:b2:79:17: 2f:5d:f6:30:49:a6:70:56:3b:c3:34:ae:3e:63:af: a9:c5:70:4a:e9:3f:d3:de:51:4f:70:e6:78:84:02: 49:e8:f5:c3:64:e0:b6:c1:5b:e2:fd:2c:a5:41:44: c4:85:b6:14:22:fe:a7:c3:50:88:ff:b7:76:43:94: b5:bd:4f:29:6d:1a:cb:9f:d1:42:28:7a:3a:ac:3a: 0a:00:b9:25:fa:df:08:ce:cd:1c:d5:8e:d2:e9:40: ca:ce:ac:5d:9d:b7:0a:a1:68:9f:70:08:6e:e8:ec: 56:ab:48:6c:81:f9:72:83:d1:2f:2d:62:f3:60:92: e1:60:2f:60:13:06:2d:4d:66:11:07:0b:17:60:52: d8:9a:49:97:04:48:64:03:be:ad:31:a5:cc:78:e5: de:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:21:01:A7:41:8A:6B:54:6B:C7:6E:F5:2F:F4:DA:F8:A8:00:8B:D8 X509v3 Authority Key Identifier: keyid:04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/OiEBp0GKa1Rrx271L_Ta-KgAi9g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.255.224.0/19 Signature Algorithm: sha256WithRSAEncryption 46:81:43:d6:1c:49:0b:9d:ed:27:eb:43:ab:4e:d7:ba:8d:d8: 54:a7:4a:9e:67:ed:1b:56:3f:dd:c7:fc:22:25:c5:1d:42:74: c8:b4:5b:e2:0a:ae:22:b1:99:7d:23:bf:39:47:94:93:4c:6d: b3:3a:80:d7:de:a6:f4:e5:a8:b3:ae:89:e3:b9:bb:9c:1d:16: a8:a4:51:fa:11:49:ce:4e:20:6f:1b:78:cc:48:f6:24:0d:3d: 33:c2:9f:37:37:3b:e0:28:0d:a6:7b:35:9b:40:ef:40:15:ed: 95:1e:cb:4f:34:29:be:eb:d5:e7:30:c2:1e:98:8b:e0:79:51: 94:bb:a8:42:cc:95:52:eb:ff:06:9d:45:f5:e5:24:0a:a3:f1: 57:80:d8:df:40:d3:ba:a5:19:74:55:4e:12:69:67:ea:a3:ae: 8e:3b:88:da:e9:6b:3c:90:ff:e5:49:b3:99:b4:d8:05:98:3f: 7f:a6:52:01:80:60:94:ea:93:be:32:f1:5e:c0:fb:3f:b5:86: 08:e9:c1:29:dd:44:7b:a4:06:c0:c2:b6:1f:6d:8d:8f:8e:27: 57:97:b3:02:10:42:16:1e:0b:35:76:59:4b:45:3d:7e:a2:0e: d1:d3:1d:16:1a:7d:4b:bc:31:0a:fd:26:00:31:22:f1:56:90: e5:aa:65:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x9KI/8m+nr/pXLIrK22oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0OGVlZmI1YjI2NDgzNTYxNzExYzk5MGYyMGZmNTUyYWM0 ZTJjOWMwHhcNMjYwMTAxMTgxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTIxMDFhNzQxOGE2YjU0NmJjNzZlZjUyZmY0ZGFmOGE4MDA4YmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrDCw8vwwKiiVRWxokvEjagnGxrz qYmeUl2cQr9ptl6RcOx64+dC/ZRyhAAbgKji0GT7jo5xn+62K3sE+kXT59ZctUh7 OIafIl7z+Fb7rMTk0x69ZAipT3VWCgd2DYI0kmcjwEiyeRcvXfYwSaZwVjvDNK4+ Y6+pxXBK6T/T3lFPcOZ4hAJJ6PXDZOC2wVvi/SylQUTEhbYUIv6nw1CI/7d2Q5S1 vU8pbRrLn9FCKHo6rDoKALkl+t8Izs0c1Y7S6UDKzqxdnbcKoWifcAhu6OxWq0hs gflyg9EvLWLzYJLhYC9gEwYtTWYRBwsXYFLYmkmXBEhkA76tMaXMeOXeEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDohAadBimtUa8du9S/02vioAIvYMB8GA1UdIwQY MBaAFASO77WyZINWFxHJkPIP9VKsTiycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkk3dnRiSmtnMVlYRWNtUThnXzFVcXhPTEp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80YjYzNTQtYTdhMy00MzUxLWE3ZGUt YWVhYzVkOWNkYzdiLzEvT2lFQnAwR0thMVJyeDI3MUxfVGEtS2dBaTlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS80YjYzNTQtYTdhMy00MzUxLWE3ZGUtYWVhYzVkOWNkYzdi LzEvQkk3dnRiSmtnMVlYRWNtUThnXzFVcXhPTEp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFkv/gMA0G CSqGSIb3DQEBCwUAA4IBAQBGgUPWHEkLne0n60OrTte6jdhUp0qeZ+0bVj/dx/wi JcUdQnTItFviCq4isZl9I785R5STTG2zOoDX3qb05aizronjubucHRaopFH6EUnO TiBvG3jMSPYkDT0zwp83NzvgKA2mezWbQO9AFe2VHstPNCm+69XnMMIemIvgeVGU u6hCzJVS6/8GnUX15SQKo/FXgNjfQNO6pRl0VU4SaWfqo66OO4ja6Ws8kP/lSbOZ tNgFmD9/plIBgGCU6pO+MvFewPs/tYYI6cEp3UR7pAbAwrYfbY2PjidXl7MCEEIW Hgs1dllLRT1+og7R0x0WGn1LvDEK/SYAMSLxVpDlqmW8 -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:52 2026 by rpki-client